Skip to content
OpenAdvisories

Package · npm

pizza-pasta

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-wxrm-2h86-v95f

    Malicious Package in pizza-pasta

    Version 1.0.3 of `pizza-pasta` contains malicious code as a install scripts. The package created folders in the system's Desktop and downloaded an image from `imgur.com`. The package also printed the users SSH keys to the console. ## Recommendation Remove the…

    pizza-pasta npm